Privacy Policy

This policy explains what Cart Drawer Pro (“the app”) stores, why it stores it, and how long it is kept. Last updated 14 August 2026.

1. Information from the merchant’s store

When you install the app, Shopify provides an access token that lets the app read and write on your behalf, within the permissions you approved at install. Alongside it the app stores your myshopify.com domain, your store currency and money format, and your published languages, so prices and translated text render correctly in the drawer.

The app also stores the settings you configure — layout, colours, wording, upsell choices, spend tiers and any custom HTML you add. These are your content and are not shared with anyone.

2. Information about store staff

Shopify’s session record may include the name and email address of the staff member who installed or opened the app. This comes from Shopify as part of the standard session, is used only to keep you signed in, and is deleted with everything else when the app is uninstalled.

3. Storefront activity

To produce the analytics shown in the app, the drawer records events such as the drawer being opened, an upsell being viewed or added, a discount being applied, or checkout being clicked. Each event stores:

• the type of event and when it happened;
• Shopify’s cart token, a random identifier for the cart itself. It is not linked to a person, an account or a device fingerprint, and cannot be used to identify a shopper;
• the product or variant involved, and its value, so revenue can be attributed to the drawer.

No IP addresses, cookies, browser fingerprints or cross-site identifiers are collected, and no tracking is shared with advertising networks or other third parties.

4. Order information

If order attribution is enabled for your store, the app stores an order ID, cart token, order total and the value of any items added through the drawer, so it can report how much revenue the drawer produced. It does not store customer details, line-item personal data, shipping addresses or payment information. Payment details are handled entirely by Shopify Checkout and never reach the app.

5. How long data is kept

• Individual storefront events are deleted after 60 days.
• Daily totals (counts and revenue sums, containing no identifiers) are kept so historical charts remain available.
• Your settings and store record are kept while the app is installed.

When you uninstall the app, or when Shopify sends a shop redaction request, the store record and its session are deleted, and every related setting, event, daily total and order attribution is removed with it.

6. Where data is stored

Data is held in a PostgreSQL database on Railway. It is not sold, rented or shared, and is not used to train machine-learning models. It is accessed only to operate the app and to respond to support requests you make.

7. Requests under GDPR, CCPA and similar laws

The app implements Shopify’s mandatory compliance webhooks. Because it holds no customer personal data, a customer data request returns nothing to disclose and a customer redaction request has nothing to erase. A shop redaction request deletes the store’s data in full, as described above.

If you or one of your customers wants to confirm what is held, or ask for deletion, email youtbe07777@gmail.com and it will be answered within 30 days.

8. Changes to this policy

If the app starts collecting anything beyond what is described here, this page will be updated and the date at the top changed before the change takes effect.

9. Contact

Questions about this policy or about data held by the app: youtbe07777@gmail.com.

Cart Drawer Pro is an application for Shopify stores. It is not affiliated with or endorsed by Shopify Inc.